PHP Link Manager Version 1.7 Url Redirection Bug

vendor:

PHP Link Manager

by:

ITSecTeam

7,5

CVSS

HIGH

URL Redirection

601

CWE

Product Name: PHP Link Manager

Affected Version From: 1.7

Affected Version To: 1.7

Patch Exists: YES

Related CWE: CVE-2009-4010

CPE: a:phpjunkyard:php_link_manager:1.7

Metasploit: https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2009-4010/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2009-4010/

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: None

2009

PHP Link Manager Version 1.7 Url Redirection Bug

PHP Link Manager version 1.7 is vulnerable to URL redirection. An attacker can redirect users to a malicious website by crafting a malicious URL.

Mitigation:

Upgrade to the latest version of PHP Link Manager.

Source

Exploit-DB raw data:

PHP Link Manager Version 1.7 Url Redirection Bug
###########################################################
#Title: PHP link manager Version 1.7
#Vendor: http://www.phpjunkyard.com/php-link-manager.php
###########################################################
#AUTHOR: ITSecTeam
#Email: Bug@ITSecTeam.com
#Website: http://www.itsecteam.com
#Forum : http://forum.ITSecTeam.com
#Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability51.htm
#Thanks: Pejvak,M3hr@n$,r3dm0v3,am!rkh@n
##########################################################

# POC
###########################################################
www.site.com/path/go.php?url=Your Url
###########################################################